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Accession number & update 

4070571, C9202-6130S-089; 920000. 
Author(s) 

Biham-E; Shamir- A, 
Author affiliation 

Dept of Appl Math & Comput Sci, Weizmann Inst of Sci, Rehovot, Israel. 

Source 

Journal-of-Cryptology (USA), vol.4, no.l, p.3-72, 1991. 
CODEN 

JOCREQ. 

ISSN 

ISSN: 0933-2790. 
Publication year 

1991. 
Language 

EN. 

Publication type 

J Journal Paper. 
Treatment codes 

P Practical; T Theoretical or Mathematical. 
Abstract 

The Data Encryption Standard (DES) is the best known and most widely used cryptosystem for civilian 
applications. It was developed at IBM and adopted by the National Bureau of Standards in the mid 1970s, and 
has successfully withstood all the attacks published so far in the open literature. The authors develop a new 
type of cryptanalytic attack which can break the reduced variant of DES with eight rounds in a few minutes on 
a personal computer and can break any reduced variant of DES (with up to 15 rounds) using less than 2/sup 
56/ operations and chosen plaintexts. The new attack can be applied to a variety of DES-like 
substitution/permutation cryptosystems, and demonstrates the crucial role of the (unpublished) design rules. 
(20 refs). 

Descriptors 
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Keywords 

differential cryptanalysis; iterated cryptosystems; Data Encryption Standard; DES; cryptosystem; 
cryptanalytic attack; reduced variant. 
Classification codes 

C6130S (Data security). 
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